Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a3a2f34382d3438203d3e20323638353736.roa
File:                     323830343a353335303a3a2f34382d3438203d3e20323638353736.roa (raw, json)
Hash identifier:          ssZyUpShlqY1/5J/osadhmP7ZANGF7GGLq23vbW8+UA=
Subject key identifier:   CE:B3:05:AD:F7:A8:17:90:C6:B8:D1:6D:CE:C4:ED:0E:F0:48:E4:CF
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       3054A38E2AD7929D3FEC6C16A2BF9F2043087B0D
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a3a2f34382d3438203d3e20323638353736.roa
Signing time:             Fri 28 Apr 2023 15:00:02 +0000
ROA not before:           Fri 28 Apr 2023 14:55:02 +0000
ROA not after:            Fri 26 Apr 2024 15:00:02 +0000
asID:                     268576
IP address blocks:        2804:5350::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:54:a3:8e:2a:d7:92:9d:3f:ec:6c:16:a2:bf:9f:20:43:08:7b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Apr 28 14:55:02 2023 GMT
            Not After : Apr 26 15:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:cc:5b:86:bd:1c:47:00:e0:2e:2b:c8:53:
                    4a:71:64:f6:4f:97:e3:5f:21:cb:28:f3:96:fb:3b:
                    3b:98:dd:e7:95:d1:08:1e:63:9c:38:a5:b8:4e:8b:
                    c7:12:11:59:11:61:c3:bd:65:12:9c:b1:2e:bb:ac:
                    fb:7e:60:37:1e:4a:c9:8e:ca:cf:b5:dd:22:18:b0:
                    e7:f8:57:e8:1a:db:eb:71:27:5e:d2:5b:55:90:8b:
                    fa:51:cd:2f:e9:b1:6e:a7:38:ee:74:95:65:19:45:
                    36:1c:01:01:30:a8:bf:cf:aa:bc:26:b1:e1:05:9a:
                    a1:13:fb:e7:0f:fe:4e:8d:e0:29:ae:78:9d:f3:b8:
                    0d:d1:99:13:f0:42:a1:c6:c6:0e:8e:55:ca:39:ae:
                    5d:8a:3b:9a:43:81:65:28:58:bc:60:8a:0a:81:c3:
                    bd:0b:10:3a:df:6b:ae:9d:98:6d:0c:14:f6:15:a1:
                    89:e5:a7:3d:f0:a2:22:bc:d0:52:0c:4d:53:c0:8d:
                    2a:88:62:fc:b0:05:38:a8:22:61:2e:6d:e0:cf:63:
                    78:cd:5d:90:32:8c:40:ea:ee:d4:6b:77:13:9d:ec:
                    c2:3e:b7:f3:a1:3d:50:92:46:08:e0:f0:5d:a6:88:
                    d7:00:d6:fe:81:9f:4a:13:85:e6:4d:42:1c:ab:98:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B3:05:AD:F7:A8:17:90:C6:B8:D1:6D:CE:C4:ED:0E:F0:48:E4:CF
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a3a2f34382d3438203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5350::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:cf:9d:0a:21:8f:3b:40:49:a3:60:07:4d:f2:9c:41:e1:7a:
         9f:fc:fb:82:23:03:11:03:62:ba:3a:f8:5e:da:7d:a9:39:7f:
         ee:f4:a7:d9:5f:92:99:6f:b1:a2:78:c1:61:24:7e:77:47:34:
         a1:23:2d:7c:ef:e5:36:ae:f5:89:86:18:ce:7a:61:25:0e:43:
         81:65:f4:6b:17:ff:07:fb:e9:8c:9d:39:47:18:b2:53:07:3c:
         75:99:66:02:44:b7:62:b4:a5:ad:b9:5e:ba:64:59:84:0c:65:
         99:bf:ab:21:b3:50:d2:b4:0a:32:0c:74:53:f4:d2:26:ad:e9:
         7a:6a:a0:a1:5f:e1:bc:89:cb:09:ee:40:56:af:ea:8d:b0:35:
         6c:dd:95:1f:09:3a:63:d7:09:2a:b6:c1:07:b2:e4:ae:5e:6f:
         14:bc:d8:fb:f2:d3:03:40:25:fe:2a:ad:4b:8f:a6:14:bb:60:
         ef:72:df:4f:90:c2:c7:c0:c5:1d:48:e8:18:40:a0:de:f7:69:
         0a:4d:ef:7f:78:11:0c:a3:d5:4e:54:c8:2b:36:1a:54:e5:5e:
         7c:b2:3b:ca:4d:27:a0:bb:24:94:07:00:3a:9b:02:e1:b6:33:
         07:f1:a1:c5:71:5b:7c:70:4a:1a:a8:38:d1:95:36:37:55:77:
         c2:10:44:c3
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgIUMFSjjirXkp0/7GwWor+fIEMIew0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJENTI1NkUwNjM3M0NGRTAzRDg5RUI3ODY1RkZDRDcw
ODZGNkVCNjAeFw0yMzA0MjgxNDU1MDJaFw0yNDA0MjYxNTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTE5OENDNUI4NkJEMUM0NzAw
RTAyRTJCQzg1MzRBNzE2NEY2NEY5N0UzNUYyMUNCMjhGMzk2RkIzQjNCOThEREU3
OTVEMTA4MUU2MzlDMzhBNUI4NEU4QkM3MTIxMTU5MTE2MUMzQkQ2NTEyOUNCMTJF
QkJBQ0ZCN0U2MDM3MUU0QUM5OEVDQUNGQjVERDIyMThCMEU3Rjg1N0U4MUFEQkVC
NzEyNzVFRDI1QjU1OTA4QkZBNTFDRDJGRTlCMTZFQTczOEVFNzQ5NTY1MTk0NTM2
MUMwMTAxMzBBOEJGQ0ZBQUJDMjZCMUUxMDU5QUExMTNGQkU3MEZGRTRFOERFMDI5
QUU3ODlERjNCODBERDE5OTEzRjA0MkExQzZDNjBFOEU1NUNBMzlBRTVEOEEzQjlB
NDM4MTY1Mjg1OEJDNjA4QTBBODFDM0JEMEIxMDNBREY2QkFFOUQ5ODZEMEMxNEY2
MTVBMTg5RTVBNzNERjBBMjIyQkNEMDUyMEM0RDUzQzA4RDJBODg2MkZDQjAwNTM4
QTgyMjYxMkU2REUwQ0Y2Mzc4Q0Q1RDkwMzI4QzQwRUFFRUQ0NkI3NzEzOURFQ0My
M0VCN0YzQTEzRDUwOTI0NjA4RTBGMDVEQTY4OEQ3MDBENkZFODE5RjRBMTM4NUU2
NEQ0MjFDQUI5OENEN0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoZjMW4a9HEcA4C4ryFNKcWT2T5fjXyHLKPOW+zs7mN3nldEIHmOc
OKW4TovHEhFZEWHDvWUSnLEuu6z7fmA3HkrJjsrPtd0iGLDn+FfoGtvrcSde0ltV
kIv6Uc0v6bFupzjudJVlGUU2HAEBMKi/z6q8JrHhBZqhE/vnD/5OjeAprnid87gN
0ZkT8EKhxsYOjlXKOa5dijuaQ4FlKFi8YIoKgcO9CxA632uunZhtDBT2FaGJ5ac9
8KIivNBSDE1TwI0qiGL8sAU4qCJhLm3gz2N4zV2QMoxA6u7Ua3cTnezCPrfzoT1Q
kkYI4PBdpojXANb+gZ9KE4XmTUIcq5jNewIDAQABo4ICUjCCAk4wHQYDVR0OBBYE
FM6zBa33qBeQxrjRbc7E7Q7wSOTPMB8GA1UdIwQYMBaAFGvVJW4GNzz+A9iet4Zf
/NcIb262MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlHSDdMb2duWHd5ZzZn
dkg1QnlHVmNEQjRkRDd4N1h6UlJQaDJQblhFdkVkLzAvNkJENTI1NkUwNjM3M0NG
RTAzRDg5RUI3ODY1RkZDRDcwODZGNkVCNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82QkQ1MjU2RTA2MzczQ0ZFMDNEODlFQjc4NjVGRkNENzA4NkY2
RUI2LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85R0g3TG9nblh3eWc2Z3ZINUJ5
R1ZjREI0ZEQ3eDdYelJSUGgyUG5YRXZFZC8wLzMyMzgzMDM0M2EzNTMzMzUzMDNh
M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzODM1MzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgE
U1AAADANBgkqhkiG9w0BAQsFAAOCAQEAgM+dCiGPO0BJo2AHTfKcQeF6n/z7giMD
EQNiujr4Xtp9qTl/7vSn2V+SmW+xonjBYSR+d0c0oSMtfO/lNq71iYYYznphJQ5D
gWX0axf/B/vpjJ05RxiyUwc8dZlmAkS3YrSlrbleumRZhAxlmb+rIbNQ0rQKMgx0
U/TSJq3pemqgoV/hvInLCe5AVq/qjbA1bN2VHwk6Y9cJKrbBB7Lkrl5vFLzY+/LT
A0Al/iqtS4+mFLtg73LfT5DCx8DFHUjoGECg3vdpCk3vf3gRDKPVTlTIKzYaVOVe
fLI7yk0noLsklAcAOpsC4bYzB/GhxXFbfHBKGqg40ZU2N1V3whBEww==
-----END CERTIFICATE-----